Security MCP Servers

Scan code for security vulnerabilities using Semgrep.

IDA Pro plugin for binary analysis: decompilation, disassembly and automatic malware analysis reports.

Autonomous reverse engineering with Ghidra: decompile binaries, rename methods and data, and list methods, classes, imports and exports.

Ghidra MCP Server — 200+ MCP tools for AI-powered reverse engineering. GUI plugin + headless server, lazy tool loading, convention…

JADX decompiler plugin providing live, LLM-assisted reverse engineering.

Honeypot framework for building decoy MCP tools that an agent would never use in normal work, to detect prompt injection and malicious…

Search-first MCP server for JavaScript reverse engineering: 735 tools across 36 domains.

Connect your favorite AI agents directly to Cheat Engine via MCP. Automate reverse engineering, pointer scanning, and memory analysis…

Production-grade MCP server giving Claude 27 security intelligence tools across 21 APIs — CVE lookup, EPSS scoring, CISA KEV, MITRE…

Stop your AI from making things up — it proposes, deterministic tools decide, every claim checked against ground truth with evidence.…

Protect your AI agents and IDEs from malicious open-source packages.

MCP server for reverse engineering tasks in Ghidra 👩‍💻

Dead code, security, secrets detection and code quality for Python, TypeScript, Go.

Headless IDA Pro MCP Server

Native Ghidra integration with GUI configuration, logging and no external dependencies.

Automate reverse engineering of Android APKs with Apktool.

Exact-action approval for consequential agent actions: request, track, and verify signed receipts.

Multi-instance IDA Pro MCP server — analyze multiple binaries simultaneously through a single MCP endpoint.

Binary Ninja plugin and bridge for automating binary analysis and reverse engineering.

Professional network analysis with tshark. Security audits, deep-dives, and threat detection.

Search community threat hunting hypotheses by keyword, threat actor, or the log sources you have.

Disassemble and inspect binaries for reverse engineering with the Radare2 disassembler.

MCP server for MikroTik routers: firewall, NAT, routing, DHCP, DNS, WireGuard and more via SSH.

Policy checks, approvals, records, and governed HTTP capabilities for unattended agents.

Search usernames across social networks and analyze URLs with maigret, an OSINT tool that collects account information from public sources.

Production-grade MCP server for Wazuh SIEM — 55 security tools for alert triage, threat hunting, vulnerability management, compliance (PCI…

Verifiable agent evidence; opt-in Codex guard and reference SOC alert review.

Arkana - Your entire malware analysis lab, behind one AI prompt. 250+ MCP tools for binary analysis with Claude Code or other MCP

Access real-time security alerts and event data from Wazuh SIEM.

Read, write and scan process memory, Cheat Engine style, on Windows, Linux and macOS.

Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.

Security testing toolbox that combines open source tools behind a single interface for pentesting, bug bounty hunting and threat hunting.

Tiny MCP server with cryptography tools, sufficient to establish end-to-end encryption between LLM agents

AI threat hunting & incident response for Elasticsearch/OpenSearch with endpoint & network forensics

Headless Ghidra MCP server — giving AI agents deep reverse-engineering capabilities.

IDA Pro Plugin for serving MCP SSE server for cursor / claude

MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.

Rust MCP server for comprehensive code intelligence - 90 tools, 32 languages, security scanning, call graphs, and more

Author, lint, validate and convert Sigma detection rules with RSigma, evaluate and explain detections against log events, and inspect…

A headless MCP server for IDA Pro and Ghidra

MCP server for querying VirusTotal API with comprehensive security analysis tools.

Ghidra plugin for binary analysis: function inspection, decompilation, memory exploration and import/export analysis.

NOT for educational purposes: An MCP server for professional penetration testers including STDIO/HTTP/SSE support, nmap, go/dirbuster,…

A free, public vulnerability feed: CVE, GHSA, OSV, CISA KEV and EPSS merged into one entry per vulnerability. RSS, JSON API and MCP. Docs…

MCP server for using the REMnux malware analysis toolkit via AI assistants

MCP server for x64dbg debugger - 23 mega-tools for AI-powered reverse engineering and debugging

AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.

Deterministic security scanning, no model or API key, plus offline-verifiable proof a fix worked.

Model Context Protocol (MCP) server for pfSense firewall management. Control firewall rules, VPNs, DNS, DHCP and diagnostics in natural…

pentestMCP: AI-Powered Penetration Testing via MCP, an MCP designed for penetration testers.

Query the CVE-Search API: browse vendors and products, get CVEs by ID and list the latest updated CVEs.

A Model Context Protocol (MCP) server that enables AI assistants to interact with IDA Pro for reverse engineering and binary analysis tasks.

Manage and interact with the OPNsense open source firewall in natural language.

Authorization-gated MCP server to discover and run 670+ security tools for CTF, pentest, and DFIR.

Modular MCP server for OPNsense firewall management - 88 tools providing access to 2000+ methods through AI assistants

A fully functional and production-grade reverse engineering MCP Server

r0idamcp is a SSE protocal MCP server IDA pro plugin designed for automatic reverse engineering with LLM assistant

Maybe the headless Ghidra MCP you are looking for.

The Privacy Firewall for LLMs

AWS security scanner with attack chain detection, IAM privilege escalation, and fixes